Merge lp:~raof/lightdm/run-is-the-new-tmp into lp:lightdm
Proposed by
Chris Halse Rogers
Status: | Merged |
---|---|
Merged at revision: | 1994 |
Proposed branch: | lp:~raof/lightdm/run-is-the-new-tmp |
Merge into: | lp:lightdm |
Diff against target: |
329 lines (+26/-26) 25 files modified
src/seat-xlocal.c (+1/-1) src/unity-system-compositor.c (+1/-1) tests/scripts/mir-autologin.conf (+1/-1) tests/scripts/mir-greeter.conf (+1/-1) tests/scripts/mir-session-compositor-crash.conf (+1/-1) tests/scripts/mir-session-crash.conf (+1/-1) tests/scripts/mir-session.conf (+1/-1) tests/scripts/unity-autologin.conf (+1/-1) tests/scripts/unity-compositor-command.conf (+1/-1) tests/scripts/unity-compositor-crash.conf (+1/-1) tests/scripts/unity-compositor-fail-ready.conf (+1/-1) tests/scripts/unity-compositor-fail-start.conf (+1/-1) tests/scripts/unity-compositor-fallback.conf (+2/-2) tests/scripts/unity-compositor-mir-next-session.conf (+1/-1) tests/scripts/unity-compositor-next-session.conf (+1/-1) tests/scripts/unity-login.conf (+1/-1) tests/scripts/unity-mir-autologin.conf (+1/-1) tests/scripts/unity-mir-greeter-mir-session.conf (+1/-1) tests/scripts/unity-mir-greeter-x-session.conf (+1/-1) tests/scripts/unity-mir-lock-seat.conf (+1/-1) tests/scripts/unity-mir-session-x-greeter.conf (+1/-1) tests/scripts/unity-mir-switch-to-user-resettable.conf (+1/-1) tests/scripts/unity-plymouth.conf (+1/-1) tests/scripts/unity-switch.conf (+1/-1) tests/scripts/unity-xdg-seat.conf (+1/-1) |
To merge this branch: | bzr merge lp:~raof/lightdm/run-is-the-new-tmp |
Related bugs: |
Reviewer | Review Type | Date Requested | Status |
---|---|---|---|
Robert Ancell | Approve | ||
PS Jenkins bot | continuous-integration | Needs Fixing | |
Review via email: mp+221262@code.launchpad.net |
Description of the change
Put unity-system-
/run is root-owned, so prevents non-admin users from performing a trivial DoS attack.
Longer term we should move to not having a socket file at all, and doing plain FD passing,
but that requires quite a lot of extra infrastructure.
To post a comment you must log in.
You should also update src/seat-xlocal.c which also creates Mir sockets in /tmp for Unity 8 sessions on desktop.
A bunch of tests now fail (make check) - you need some sed magic in tests/scripts/.
Otherwise looks great!